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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- (f NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 
• Failure to reply within the set or extended period for reply will, by slatute, cause the application to become ABANDONED (35 U.S.C. § 133). 

Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )M Responsive to communication(s) filed on 22 September 2000 . 
2a)D This action is FINAL. 2b)H This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) S Claim(s) 1-21 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) S Claim(s) 1-21 is/are rejected. 

7) d Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) 13 The drawing(s) filed on 22 September 2000 is/are: a)D accepted or b)!3 objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 1 1 9 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 
2.D Certified copies of the priority documents have been received in Application No. 



3.D Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 
Drawings 

1 . Figure 1 should be designated by a legend such as -Prior Art- because 
only that which is old is illustrated. See MPEP § 608.02(g). A proposed drawing 
correction or corrected drawings are required in reply to the Office action to avoid 
abandonment of the application. The objection to the drawings will not be held in 
abeyance. 

Claim Rejections - 35 (JSC § 102 

2. The following is a quotation of the appropriate paragraphs of 35 
U.S.C. 102 that form the basis for the rejections under this section made in this Office 
action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

3. Claims 1-21 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Hurtado et al (US 6,61 1, 812 B2). 

a. Referring to claim 1: 

i. Hurtado teaches: 

(1) a verification system to validate the integrity of the 
player applications [i.e., referring to Figure 1C, the Clearinghouse(s) 105 provides 
the licensing authorization and record keeping for all transactions that relate to 
the sale and/or permitted use of the Content 113 encrypted in a SC. When the 
Clearinghouse(s) 105 receives a request for a decryption key for the Content 113 
from an intermediate or End-User(s), the Clearinghouse(s) 105, that is "a 
verification system", validates the integrity and authenticity of the information in 
the request; verifies that the request was authorized by an Electronic Digital 
Content Store(s) or Content Provider(s) 101; and verifies that the requested usage 
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complies with the content Usage Conditions as defined by the Content 
Provider(s) 101 (column 13, lines 44-54)]; 

(2) a trusted content handler to decrypt content and to 
transmit the decrypted content to the player applications, using an extension 
mechanism defined by the application, and to enforce usage rights associated with the 
content [i.e., referring to Figure 1D, the system receives from the clearing house, a 
secure container encrypted using the encrypting key of the end user system, that 
is "a trusted content handler", containing the decrypting key for decrypting at 
least part of the previously encrypted content stored on the computer readable 
medium as permitted; and playing at least part of the previously encrypted 
content by decrypting the secure container using the encrypting key of the end 
user system to access the decrypting key for decrypting at least part of the 
encrypted content (column 6, lines 6-14)]; and 

(3) a user interface control module to ensure that users of 
the player applications are not exposed to actions that violate the usage rights [i.e., 
referring to Figure 1B, the Secure Digital Content Electronic Distribution System 
100 provides the ability to handle retransmissions of Content 113. This is 
typically performed by a Customer Service Interface 184. Electronic Digital 
Content Store(s) 103 provides a user interface (that is "to ensure that users of the 
player applications are not exposed to actions that violate the usage rights 1 ') that 
the End-User(s) can step through in order to initiate a retransmission (column 50, 
lines 66-67 through column 51, lines 1-4)]; 

(4) wherein the digital rights management system 
operates independently without cooperation from the player applications [i.e., referring 
to Figure 1C, The Clearinghouse(s) 105 is responsible for the rights management 
functions of the Secure Digital Content Electronic Distribution System 100. 
Clearinghouse(s) 105 functions include enablement of Electronic Digital Content 
Store(s) 103, verification of rights to Content 113, integrity and authenticity 
validation of the buying transaction and related information, distribution of 
Content encryption keys or Symmetric Keys 623 to End-User Device(s) 109, 
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tracking the distribution of those keys, and reporting of transaction summaries to 
Electronic Digital Content Store(s) 103 and Content Provider(s) 101 (column 45, 
lines 18-28)]. 

b. Referring to claim 2: 

i. Hurtado further teaches: 

(1) wherein the verification system includes an off line 
verifier to verify that the player applications have certain properties, and to issue trust 
certificates to verify that the player applications have said properties [i.e., in the Secure 
Digital Content Electronic Distribution System 100, the Clearinghouse(s) 105 has 
the option of issuing certificates to the Electronic Digital Content Store(s) 163. 
This allows the End-User Device(s) 109 to independently verify (this means "an 
off line verifier") that the Electronic Digital Content Store(s) 103 have been 
authorized by the Secure Digital Content Electronic Distribution System 100 
(column 17, lines 42-49)]. 

c. Referring to claim 3: 

i. Hurtado further teaches: 

(1) wherein the verification system further includes a 
verifying launcher for verifying that a particular player application is certified as a trusted 
application before digital content is transmitted to said particular player application [i.e., 
referring to Figure 1C, Content Provider(s) 101 and Electronic Digital Content 
Store(s) 103 can request transaction reports from the Clearinghouse(s) 105 via a 
Payment Verification Interface 183 (wherein" a verifying launcher for verifying 
that a particular player application is certified as a trusted application before 
digital content is transmitted to said particular player application" is considered 
to include in this verification interface 183) so they can reconcile their own 
transaction databases with the information logged by the Clearinghouse(s) 105. 
The Clearinghouse(s) 105 can also provide periodic reports to the Content 
Provider(s) 101 and Electronic Digital Content Store(s) 103. The 
Clearinghouse(s) 105 defines a secure electronic interface which allows Content 
Provider(s) 101 and Electronic Digital Content Store(s) 103 to request and receive 
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reports. The Report Request SC(s) includes a certificate that was assigned by the 
Clearinghouse(s) 105 to the entity initiating the request. The Clearinghouse(s) 
105 uses the certificate and the SC's digital signature to verify that the request 
originated from an authorized entity (column 50, lines 1-16)]. 

d. Referring to claim 4: 

i. Hurtado further teaches: 

(1) wherein the player applications request protected 
content, and the trusted content handler includes an authenticator to verify that a player 
application that requests protected content has been authorized by the verification 
system to access the requested, protected content [i.e., referring to Figure 1D, a SC 
(secure container) is cryptographic carrier of information that uses cryptographic 
encryption, digital signatures and digital certificates to provide protection against 
unauthorized interception and modification of the electronic information or 
Content 113. It also allows for the authenticity verification, that is "an 
authenticator", of the electronic data (column 25, lines 10-15)]. 

e. Referring to claim 5: 

i. Hurtado further teaches: 

(1) wherein a user interface control module traps user 
interface related messages generated as a result of user interactions with player 
applications, blocks messages that lead to usage rights violations, and passes through 
other messages to the player applications [i.e., referring to Figure 1B, Electronic 
Digital Content Store(s) 103 provides a user interface, which could "traps user 
interface related messages generated as a result of user interactions with player 
applications, blocks messages that lead to usage rights violations, and passes 
through other messages to the player applications" (column 51, lines 2-3)]. 

f. Referring to claims 6 and 10: 

i. These claims have limitations that is similar to those of claim 
1 , thus they are rejected with the same rationale applied against claim 1 above. 

g. Referring to claims 7 and 1 1: 
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i. These claims have limitations that is similar to those of claim 
2 t thus they are rejected with the same rationale applied against claim 2 above. 

h. Referring to claims 8 and 12: 

i. These claims have limitations that is similar to those of claim 

3, thus they are rejected with the same rationale applied against claim 3 above. 

i. Referring to claims 9 and 13: 

i. These claims have limitations that is similar to those of claim 

4, thus they are rejected with the same rationale applied against claim 4 above. 

j. Referring to claim 14: 
i. Hurtado teaches: 

(1) a certificate generator for receiving applications, for 
determining if the applications exhibit a predefined property, and for issuing a trust 
certificate for each of the applications that exhibits the predefined property [i.e., 
referring to Figure 1C, in the Secure Digital Content Electronic Distribution 
System 100, the Clearinghouse(s) 105, that is "a certificate generator, has the 
option of issuing certificates to the Electronic Digital Content Store(s) 163 
(column 17, lines 42-45)]; 

(2) a certificate repository for receiving and storing trust 
certificates issued by the certificate generator [i.e., referring to Figure 1B, electronic 
digital content store(s) 103 that is "for receiving and storing trust certificates 
issued by the certificate generator"]; 

(3) a code verifier for verifying that a particular player 
application is certified as a trusted application before digital content is transmitted to 
said particular player application [i.e., referring to Figure 1D, the End-User Device(s) 
109, that is "a code verifier", verifies the copy/play code before allowing the de- 
scrambling of the Content 113 and the execution of the play or copy (column 24, 
lines 3-7)]; and 

(4) an authenticator for receiving requests, using an 
extension mechanism defined by the applications, to verify that a player application that 
requests protected content has been authorized by the verification system to access the 
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requested, protected content [i.e., referring to Figure 1D, a SC (secure container) is 
cryptographic carrier of information that uses cryptographic encryption, digital 
signatures and digital certificates to provide protection against unauthorized 
interception and modification of the electronic information or Content 113. It also 
allows for the authenticity verification, that is "an authenticator", of the electronic 
data (column 25, lines 10-15)]. 

k. Referring to claim 15: 

i. Hurtado further teaches: 

(1) wherein the code verifier is responsible for launching 
the player application and verifying the identity and integrity of the code using the 
information in the trust certificate before launching the application; the launch procedure 
returning process identification information, which the code verifier records internally; 
the authenticator communicating the same or other process identification information 
concerning its own process, which it obtains from system service calls, to the code 
verifier at the time the application requests: content from the authenticator; the code 
verifier matching this process identification information against the process identification 
information it recorded; the code verifier returning a code indicating whether the process 
was verified or not [i.e., referring to Figures 1A-1D, the control of Content usage is 
enabled through the End-User Player Application 195 running on an End-User 
Device(s). The application embeds a digital code in every copy of the Content 
that defines the allowable number of secondary copies and play backs. Digital 
watermarking technology is used to generate the digital code, to keep it hidden 
from other End-User Player Application 195, and to make it resistant to alteration 
attempts. In addition, a Secure Container (SC) is a structure that consists of 
several parts which together define a unit of Content 113 or a portion of a 
transaction, and which also define related information such as Usage Conditions, 
metadata, and encryption methods. SC(s) are designed in such a way that the 
integrity, completeness, and authenticity of the information can be verified. 
Some of the information in SC(s) may be encrypted so that it can only be 
accessed after proper authorization has been obtained (column 27, lines 27-36)]. 
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I. Referring to claim 16: 

i. This claim has limitations that is similar to those of claim 15, 
thus it is rejected with the same rationale applied against claim 15 above. 

m. Referring to claim 1 7: 

i. Hurtado further teaches: 

(1) wherein the trust certificate includes: a program 
identifier identifying said one of the applications; a property name identifying an attribute 
certified by the trust certificate; a code digest of the one application; a digital signature 
containing a secret key of the application certifier; and a certifier identification containing 
a public key of the application certifier [i.e., referring to Figure 1D, Secure Containers 
are used to distribute encrypted content and information among the system 
components. A SC is a cryptographic carrier of information or content that uses 
encryption, digital signatures, and digital certificates to provide protection 
against unauthorized interception or modification of electronic information and 
content. It also allows for the verification of the authenticity and integrity of the 
Digital Content. Furthermore, the system receives from the clearing house, a 
secure container encrypted using the encrypting key of the end user system 
containing the decrypting key for decrypting at least part of the previously 
encrypted content stored on the computer readable medium as permitted; and 
playing at least part of the previously encrypted content by decrypting the secure 
container using the encrypting key of the end user system to access the 
decrypting key for decrypting at least part of the encrypted content (column 10, 
lines 8-14). In addition, In the Secure Digital Content Electronic Distribution 
System 100, symmetric keys and other small data pieces are encrypted using 
public keys. Public key algorithms use two keys. The two keys are 
mathematically related so that data encrypted with one key can only be decrypted 
with the other key. The owner of the keys keeps one key private (private key) and 
publicly distributes the second key (public key) (column 16, lines 20-26)]. 

n. Referring to claims 18 and 20: 
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i. These claims have limitations that is similar to those of claim 
14, thus they are rejected with the same rationale applied against claim 14 above, 
o. Referring to claims 19 and 21: 

i. These claims have limitations that is similar to those of claim 
17, thus they are rejected with the same rationale applied against claim 17 above. 

Conclusion 

4. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

a. Jones et al (US 6, 697, 944) discloses a digital content file 
distribution, transmission, and protection system comprises a digital content provider 
having stored therein a digital content file such as an audio file, video file, literature, 
program file, etc. The digital content provider includes an authentication interface and a 
USB port from which the digital content file may be downloaded (see abstract). 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to Thanhnga (Tanya) Truong 
whose telephone number is 703-305-0327. 

If attempts to reach the examiner by telephone are unsuccessful, 
the examiner's supervisor, Kim Vu can be reached on 703-305-4393. The fax and 
phone numbers for the organization where this application or proceeding is assigned is 
703-872-9306. 

Any inquiry of a general nature or relating to the status of this 
application or proceeding should be directed to the receptionist whose telephone 
number is 703-305-3900. 
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